Published
2025-05-22
·
Updated
2025-07-29
·
CVE-2025-3944
9.8
Critical
| Base vector | Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Tridium Niagara Framework versions prior to 4.14.2, prior to 4.15.1, prior to 4.10.11
Tridium Niagara Enterprise Security versions prior to 4.14.2, prior to 4.15.1, prior to 4.10.11
Description:
The issue affects Tridium Niagara Framework and Tridium Niagara Enterprise Security on QNX, allowing file manipulation due to incorrect permission assignment for critical resources.
Recommendations:
For Tridium Niagara Framework versions prior to 4.14.2, upgrade to version 4.14.2u2.
For Tridium Niagara Framework versions prior to 4.15.1, upgrade to version 4.15.u1.
For Tridium Niagara Framework versions prior to 4.10.11, upgrade to version 4.10u.11.
For Tridium Niagara Enterprise Security versions prior to 4.14.2, upgrade to version 4.14.2u2.
For Tridium Niagara Enterprise Security versions prior to 4.15.1, upgrade to version 4.15.u1.
For Tridium Niagara Enterprise Security versions prior to 4.10.11, upgrade to version 4.10u.11.
Fix
Incorrect Permission